URLhaus Database

You are currently viewing the URLhaus database entry for http://vikinggg.com/wp-includes/Document/4B38rR6qFF/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:704156
URL: http://vikinggg.com/wp-includes/Document/4B38rR6qFF/
URL Status:Offline
Host: vikinggg.com
Date added:2020-10-16 21:44:04 UTC
Last online:2020-10-20 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 21:44:33 UTC to abuse{at}digitalocean[dot]com)
Takedown time:3 days, 14 hours, 56 minutes Bad (down since 2020-10-20 12:40:51 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17doc-QUF5157.docdoc 294c6f87d8514072c30988bd55dd643c5c018b9f9ae05b9db1a97d034b31e092n/aHeodo
2020-10-17878FQ 2020_10_17 595494.docdoc ea4cb3d56a4e049d8d0e7d1e30ff96c6b4fd216860a4c48ed248940702f3b7acn/aHeodo
2020-10-17DAT 4747565.docdoc ba1aeafd7f85b7fe6d27c96a0fc87b47c20150c8adb74124716adeb6ef26a98bVirustotal results 53.23%Heodo
2020-10-17REP 20201017 550273.docdoc 560cbfa962587b928c5ba13f5cce70b94a0a90991ee4f4db32f2a6c6a3936237n/aHeodo
2020-10-17FILE-2020_10_17-TMS596795.docdoc c8647133e45a641a9cefb6726994df00dcfc9fa481d38e667eab8f74f75c54b0n/aHeodo
2020-10-17arc_20201017_F305.docdoc 308b5a0affafedcef7431861d7785ddf4db3314cf5e18d5fdbc4c0168cc63ea7n/aHeodo
2020-10-17INF_2020_10_17_171306.docdoc 203a54f8692f6554ad685a3d9e94ec1f3482366c3c455312540f744cbda4f479Virustotal results 53.23%Heodo
2020-10-17LIST-2020_10_17-41666.docdoc 559b9d806bede7814d4c85984a6e6815356e1ce8e730ca7907309e03eed5fcaen/aHeodo
2020-10-17Dat_83380.docdoc fca525a70cdbc09d5adb7e320849a4e9958f5edb129e2accce15281a340edf54n/aHeodo
2020-10-17MES_131217.docdoc 49bfab81e7c83836e13d24a1c3e607ce00aa745e850f110ef848cf96ab0b5b30n/aHeodo
2020-10-17Inf_20201017_SW692.docdoc c14604804cc32fb30b522dd9dff211839670ae27b989326efce1e69589bc9d36n/aHeodo
2020-10-17arc_20201017_G341.docdoc b5ea62943f3b8f07f8fc66e4e35a1d4d12022eae32ee901b016f48bf66fec06fVirustotal results 51.61%Heodo
2020-10-16File-2020_10_17-OY246.docdoc f248106a010a23404bc680541ff725431478f2a3a368efc846d4bee707af6c22Virustotal results 51.61%Heodo
2020-10-16List 2020_10_17 6244.docdoc 39319e4e0e23653363b81024b93090dbf717424cc2dcc3c0291e6e56e3328ed2Virustotal results 51.61%Heodo
2020-10-16ARC FX21864.docdoc d546749eeff6828f731a5f79a2352276696d9ce6d5614dc6e9779fa2dbbe6799n/aHeodo
2020-10-16Mes 9874918.docdoc 691b2fc6acbee6cf5fb93b6afad38eb2f61c4a211cb17cb3c617c2bdebd48f61Virustotal results 49.06%Heodo
2020-10-16inf-2020_10_17-NI6705.docdoc 5c58c91ffdffd84690c6746f6afc2eaeacd03df2e4a83c6e662755624113cf5bVirustotal results 51.61%Heodo
2020-10-16ARC_214654.docdoc 4773da38da0ba3154bbb3b813c803bd6e1f9ab3bad1888f1402f7b17073620ecVirustotal results 51.61%Heodo